Skip to main content

Contact Support
Download Resources

Main

Contact Support
Download Resources

Main

Getting Started

Release Notes

Version 4.3.0

Installation & Setup

Planning to Deploy

Service Architecture Overview
Standard Port Requirement for Installation
System Requirements
Deployment Scenarios
Setting up test environment

Installing Sectona Components

Installing Sectona Web Access
Installing Vault Component
Installing Sectona Jump Host Component
Installing Sectona File Synchronization Component
Installing Session & Web Session Proxy Component
Installing Sectona Satellite Vault Component
Installing Sectona Vault API Extension
Installing Sectona Client App
Installing Sectona Windows Monitoring Component
Installing Sectona Launcher
Installing Sectona Remote Access Publisher Component
Installing Sectona Remote Session Host

Building High Availability Setup

High-Availability Introduction & Key Concepts
Choosing an Architecture for HA & DR Requirements
Configuring Vault for High Availability
Configuring Sectona Web Access for High Availability

Configuring Disaster Recovery Setup
Migrating from evaluation to production
Rebuilding your setup
Upgrading the System

Configure & Implement

General Configurations

Customizing web application appearance & site settings
Adding new LDAP/LDAPs directory
Configuring location tagging
Defining network zones
Managing video recording settings
Setting criticality level tags
Configure Email settings
Setting up a network proxy
Applying conditions with tags
Configuring HTTPs certificate
Updating default system settings

Configuring user authentication

LDAP/LDAPs supported directories
Radius authentication
Sectona authentication

SAML authentication

OneLogin SAML
Okta SAML
Duo SAML

Securing & Monitoring Sessions

Configuring a Session Proxy & Web Session Proxy
Configuring Jump Host
Configuring SSHD Proxy
Configuring RDPD Proxy
Configuring Remote Session Host

Integrating Ticketing Systems

Jira Cloud

Configuring Multi-factor authentication

Sectona MFA
DUO MFA
Okta MFA
OneLogin MFA
Google Authenticator
RSA SecureID
Vasco
Generic RADIUS
Microsoft Authenticator
FIDO2

Working with multi-tenant environment

Configuring Satellite Vault for break glass

Accessing Satellite Vault

Backing up, Restoring, and Archival

Configuring Notifications

Key concepts & Capabilties of Notification Service
Architecture & flow of Notification Service
Using Notification templates
Setting up Notifications

Forwarding Logs

Administer

Running discovery

Setting up asset discovery

Network scan
Amazon Web Services (AWS) resources
Microsoft Azure Resources
VMware vSphere workloads
Google Cloud
Hyper-V Asset Scan
Active Directory (AD)
SNMP Discovery

Handling assets and accounts manually from discovery
Schedule account discovery jobs
Configuring credentials
Viewing Discovery Map

Managing assets & access types

Adding assets in the system
Managing access types

Managing accounts & keys

Onboarding accounts in vault
Managing account operations

Working with account groups

Account group management
Account group operations

Managing user & authentication

Adding users in the system
Managing user roles
User authentication settings
Defining user groups
Setting up user access policy
Assigning policy-based access to users
Managing user operations

Setting up password management

Configuring management account
Configuring password policy
Configuring password rotation policy
Configuring password checkout policy
Configuring reconciliation policy

Enabling Just-in-time Access

Windows platforms
Unix platforms

Workflow-based access

Enabling Maker Checker

Managing & reviewing session Logs

View Session Recordings
Viewing password checkout history
Viewing Live Sessions
Reviewing sessions
Monitoring or terminating live sessions
Adjusting session risk scoring & threat analytics parameters

Managing server privileges

Command Restriction for SSH
Application Control for Windows
Database Query Restriction

Reporting & analytics

Viewing & exporting reports
Scheduling a Report
Designing & customizing reports

Automating Privileged Tasks

PTM key concepts & capabilities
Architecture, flow, & advantages of PTM
PTM Libraries
Configuring Tasks

Account Lifecycle Management

Account Provisioning
Manage Provisioned Accounts

Managing the system

Auditing system changes
Using troubleshooting utilities
Monitoring System Health & Service Status
Dashboard
Managing licenses

Develop

HTTP POST Headers

Management APIs

API - Manage User
API - Manage Asset
API - Manage Account
API - Get Instance Information
API - Get User Groups Information
API - Get Users by Group
API - Get Users Information
API - Map, Un-map User with User Group
API - Get Assets
API - Get Account Groups
API - Get Accounts by Asset
API - Get Accounts by Account Groups
API - Map Un-map Account with Account Group
API - Get Entitlement
API - Get Discovered Accounts
API - Get Discovered Assets

Vault Password API Headers

Password Vault APIs

API - Password Vault

Response Error Codes

Use

Launching the product

Accessing a Target Asset

Working with assets
Working with accounts
Collaborating session

Using workflow

Raising a request
Managing approvals

Executing tasks
Accessing secrets during break glass

Breadcrumbs

Privileged Access Management
Administer

On this Page

Managing the system

This section covers details about managing audit events by system administrators, managing system health & services, etc.

Auditing system changes
Using troubleshooting utilities
Monitoring System Health & Service Status
Dashboard
Managing licenses

EULA
Terms
Privacy Policy

Copyright
Powered by Scroll Sites & Atlassian Confluence